August 2018 - crux-commits

ports/opt (3.4): fuse3: update to 3.2.6
by crux＠crux.nu 31 Aug '18

31 Aug '18

commit eb33f2358d10f48612d9be5dc403f0b96976268f Author: Juergen Daubert <jue(a)jue.li> Date: Fri Aug 31 16:30:06 2018 +0200 fuse3: update to 3.2.6 diff --git a/fuse3/.footprint b/fuse3/.footprint index 8f8311c7c..ee77bbcc0 100644 --- a/fuse3/.footprint +++ b/fuse3/.footprint @@ -10,8 +10,8 @@ drwxr-xr-x root/root usr/include/fuse3/ -rw-r--r-- root/root usr/include/fuse3/fuse_opt.h drwxr-xr-x root/root usr/lib/ lrwxrwxrwx root/root usr/lib/libfuse3.so -> libfuse3.so.3 -lrwxrwxrwx root/root usr/lib/libfuse3.so.3 -> libfuse3.so.3.2.5 --rwxr-xr-x root/root usr/lib/libfuse3.so.3.2.5 +lrwxrwxrwx root/root usr/lib/libfuse3.so.3 -> libfuse3.so.3.2.6 +-rwxr-xr-x root/root usr/lib/libfuse3.so.3.2.6 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/fuse3.pc drwxr-xr-x root/root usr/sbin/ diff --git a/fuse3/.signature b/fuse3/.signature index d3412e679..d348cccfc 100644 --- a/fuse3/.signature +++ b/fuse3/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/cZjC/XyHaQTrtGTpY2paXUnDYXC2MpRGuZaxeKfH17qfJH8e5fUv96AvhlnTgS3mc++udblXlD/ek0QlWXs7gc= -SHA256 (Pkgfile) = 65ee6ec36f3b491ab9a62cf18c3f12e12eb388aac79e346105433c2a27dfa8ad -SHA256 (.footprint) = a7db97bb622e20a3fe009bdbfe17159616ef2a2c0ac113473c470b5fa811cfca -SHA256 (fuse-3.2.5.tar.xz) = 3fa7534aae3d9523bd0245f085eb753a9b9d0dc9d2902dd51d6959b2b5394cf1 +RWSE3ohX2g5d/aVRJ2aKA9glB3K/xu3e1bDwD6fB+t7rDwh0F27rgmUALfXwp79PRqeum4BiMfDLazZ7sxHSqAwtG9TylpT2pQo= +SHA256 (Pkgfile) = 4a8261eb2aa5e54a9760890132d2069450ffab67e0ffb8dafd0bcc625f59665f +SHA256 (.footprint) = 17a5739fc0b366d22c1aaca4d4431feeee80faa11d0878d191487b3ada4620de +SHA256 (fuse-3.2.6.tar.xz) = cea4dad559b3fbdbb8e4ad5f9df6083fdb7f2b904104bd507ef790d311d271cf diff --git a/fuse3/Pkgfile b/fuse3/Pkgfile index 510fef6a3..e0c52c272 100644 --- a/fuse3/Pkgfile +++ b/fuse3/Pkgfile @@ -4,14 +4,14 @@ # Depends on: meson ninja name=fuse3 -version=3.2.5 +version=3.2.6 release=1 source=(https://github.com/libfuse/libfuse/releases/download/fuse-$version/… build() { cd fuse-$version - meson build --prefix /usr + meson build --prefix /usr --sysconfdir /etc DESTDIR=$PKG ninja -C build -j ${JOBS:-1} install rm -r $PKG/{dev,etc,lib}

1 0

ports/opt (3.4): dropbear: add patch
by crux＠crux.nu 31 Aug '18

31 Aug '18

commit 207e329423042543c7877832acb05d27c44629aa Author: Juergen Daubert <jue(a)jue.li> Date: Fri Aug 31 16:29:36 2018 +0200 dropbear: add patch diff --git a/dropbear/CVE-2018-15599.diff b/dropbear/CVE-2018-15599.diff new file mode 100644 index 000000000..963ed35bb --- /dev/null +++ b/dropbear/CVE-2018-15599.diff @@ -0,0 +1,222 @@ + +# HG changeset patch +# User Matt Johnston <matt(a)ucc.asn.au> +# Date 1535038992 -28800 +# Node ID 5d2d1021ca0006337af58859c861f2349715b73b +# Parent cd23631dab5c653c66fe697e24f026aefbfcecb3 +Wait to fail invalid usernames + +diff -r cd23631dab5c -r 5d2d1021ca00 auth.h +--- a/auth.h Thu Aug 23 22:10:07 2018 +0800 ++++ b/auth.h Thu Aug 23 23:43:12 2018 +0800 +@@ -37,9 +37,9 @@ + void send_msg_userauth_failure(int partial, int incrfail); + void send_msg_userauth_success(void); + void send_msg_userauth_banner(const buffer *msg); +-void svr_auth_password(void); +-void svr_auth_pubkey(void); +-void svr_auth_pam(void); ++void svr_auth_password(int valid_user); ++void svr_auth_pubkey(int valid_user); ++void svr_auth_pam(int valid_user); + + #if DROPBEAR_SVR_PUBKEY_OPTIONS_BUILT + int svr_pubkey_allows_agentfwd(void); +diff -r cd23631dab5c -r 5d2d1021ca00 svr-auth.c +--- a/svr-auth.c Thu Aug 23 22:10:07 2018 +0800 ++++ b/svr-auth.c Thu Aug 23 23:43:12 2018 +0800 +@@ -149,10 +149,8 @@ + if (methodlen == AUTH_METHOD_PASSWORD_LEN && + strncmp(methodname, AUTH_METHOD_PASSWORD, + AUTH_METHOD_PASSWORD_LEN) == 0) { +- if (valid_user) { +- svr_auth_password(); +- goto out; +- } ++ svr_auth_password(valid_user); ++ goto out; + } + } + #endif +@@ -164,10 +162,8 @@ + if (methodlen == AUTH_METHOD_PASSWORD_LEN && + strncmp(methodname, AUTH_METHOD_PASSWORD, + AUTH_METHOD_PASSWORD_LEN) == 0) { +- if (valid_user) { +- svr_auth_pam(); +- goto out; +- } ++ svr_auth_pam(valid_user); ++ goto out; + } + } + #endif +@@ -177,12 +173,7 @@ + if (methodlen == AUTH_METHOD_PUBKEY_LEN && + strncmp(methodname, AUTH_METHOD_PUBKEY, + AUTH_METHOD_PUBKEY_LEN) == 0) { +- if (valid_user) { +- svr_auth_pubkey(); +- } else { +- /* pubkey has no failure delay */ +- send_msg_userauth_failure(0, 0); +- } ++ svr_auth_pubkey(valid_user); + goto out; + } + #endif +diff -r cd23631dab5c -r 5d2d1021ca00 svr-authpam.c +--- a/svr-authpam.c Thu Aug 23 22:10:07 2018 +0800 ++++ b/svr-authpam.c Thu Aug 23 23:43:12 2018 +0800 +@@ -178,13 +178,14 @@ + * Keyboard interactive would be a lot nicer, but since PAM is synchronous, it + * gets very messy trying to send the interactive challenges, and read the + * interactive responses, over the network. */ +-void svr_auth_pam() { ++void svr_auth_pam(int valid_user) { + + struct UserDataS userData = {NULL, NULL}; + struct pam_conv pamConv = { + pamConvFunc, + &userData /* submitted to pamvConvFunc as appdata_ptr */ + }; ++ const char* printable_user = NULL; + + pam_handle_t* pamHandlep = NULL; + +@@ -204,12 +205,23 @@ + + password = buf_getstring(ses.payload, &passwordlen); + ++ /* We run the PAM conversation regardless of whether the username is valid ++ in case the conversation function has an inherent delay. ++ Use ses.authstate.username rather than ses.authstate.pw_name. ++ After PAM succeeds we then check the valid_user flag too */ ++ + /* used to pass data to the PAM conversation function - don't bother with + * strdup() etc since these are touched only by our own conversation + * function (above) which takes care of it */ +- userData.user = ses.authstate.pw_name; ++ userData.user = ses.authstate.username; + userData.passwd = password; + ++ if (ses.authstate.pw_name) { ++ printable_user = ses.authstate.pw_name; ++ } else { ++ printable_user = "<invalid username>"; ++ } ++ + /* Init pam */ + if ((rc = pam_start("sshd", NULL, &pamConv, &pamHandlep)) != PAM_SUCCESS) { + dropbear_log(LOG_WARNING, "pam_start() failed, rc=%d, %s", +@@ -242,7 +254,7 @@ + rc, pam_strerror(pamHandlep, rc)); + dropbear_log(LOG_WARNING, + "Bad PAM password attempt for '%s' from %s", +- ses.authstate.pw_name, ++ printable_user, + svr_ses.addrstring); + send_msg_userauth_failure(0, 1); + goto cleanup; +@@ -253,12 +265,18 @@ + rc, pam_strerror(pamHandlep, rc)); + dropbear_log(LOG_WARNING, + "Bad PAM password attempt for '%s' from %s", +- ses.authstate.pw_name, ++ printable_user, + svr_ses.addrstring); + send_msg_userauth_failure(0, 1); + goto cleanup; + } + ++ if (!valid_user) { ++ /* PAM auth succeeded but the username isn't allowed in for another reason ++ (checkusername() failed) */ ++ send_msg_userauth_failure(0, 1); ++ } ++ + /* successful authentication */ + dropbear_log(LOG_NOTICE, "PAM password auth succeeded for '%s' from %s", + ses.authstate.pw_name, +diff -r cd23631dab5c -r 5d2d1021ca00 svr-authpasswd.c +--- a/svr-authpasswd.c Thu Aug 23 22:10:07 2018 +0800 ++++ b/svr-authpasswd.c Thu Aug 23 23:43:12 2018 +0800 +@@ -48,22 +48,14 @@ + + /* Process a password auth request, sending success or failure messages as + * appropriate */ +-void svr_auth_password() { ++void svr_auth_password(int valid_user) { + + char * passwdcrypt = NULL; /* the crypt from /etc/passwd or /etc/shadow */ + char * testcrypt = NULL; /* crypt generated from the user's password sent */ +- char * password; ++ char * password = NULL; + unsigned int passwordlen; +- + unsigned int changepw; + +- passwdcrypt = ses.authstate.pw_passwd; +- +-#ifdef DEBUG_HACKCRYPT +- /* debugging crypt for non-root testing with shadows */ +- passwdcrypt = DEBUG_HACKCRYPT; +-#endif +- + /* check if client wants to change password */ + changepw = buf_getbool(ses.payload); + if (changepw) { +@@ -73,12 +65,21 @@ + } + + password = buf_getstring(ses.payload, &passwordlen); +- +- /* the first bytes of passwdcrypt are the salt */ +- testcrypt = crypt(password, passwdcrypt); ++ if (valid_user) { ++ /* the first bytes of passwdcrypt are the salt */ ++ passwdcrypt = ses.authstate.pw_passwd; ++ testcrypt = crypt(password, passwdcrypt); ++ } + m_burn(password, passwordlen); + m_free(password); + ++ /* After we have got the payload contents we can exit if the username ++ is invalid. Invalid users have already been logged. */ ++ if (!valid_user) { ++ send_msg_userauth_failure(0, 1); ++ return; ++ } ++ + if (testcrypt == NULL) { + /* crypt() with an invalid salt like "!!" */ + dropbear_log(LOG_WARNING, "User account '%s' is locked", +diff -r cd23631dab5c -r 5d2d1021ca00 svr-authpubkey.c +--- a/svr-authpubkey.c Thu Aug 23 22:10:07 2018 +0800 ++++ b/svr-authpubkey.c Thu Aug 23 23:43:12 2018 +0800 +@@ -79,7 +79,7 @@ + + /* process a pubkey auth request, sending success or failure message as + * appropriate */ +-void svr_auth_pubkey() { ++void svr_auth_pubkey(int valid_user) { + + unsigned char testkey; /* whether we're just checking if a key is usable */ + char* algo = NULL; /* pubkey algo */ +@@ -102,6 +102,15 @@ + keybloblen = buf_getint(ses.payload); + keyblob = buf_getptr(ses.payload, keybloblen); + ++ if (!valid_user) { ++ /* Return failure once we have read the contents of the packet ++ required to validate a public key. ++ Avoids blind user enumeration though it isn't possible to prevent ++ testing for user existence if the public key is known */ ++ send_msg_userauth_failure(0, 0); ++ goto out; ++ } ++ + /* check if the key is valid */ + if (checkpubkey(algo, algolen, keyblob, keybloblen) == DROPBEAR_FAILURE) { + send_msg_userauth_failure(0, 0); +

1 0

ports/opt (3.4): nspr: updated to 4.20
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit ee6b9ff7803d18cc781daa6074377199475bb840 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 30 20:29:45 2018 +0200 nspr: updated to 4.20 diff --git a/nspr/.signature b/nspr/.signature index be3f0c96a..8175d5cdf 100644 --- a/nspr/.signature +++ b/nspr/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/fF3/olAT4f7/YSRICtkgIInX+sWWEvA/Oo96qzNCqnMx76JoAjrXVoQoUrdP+EHtZsmnDMFgw5udS/T2Y1+bA4= -SHA256 (Pkgfile) = 0c16ce56bf384c6d1e5af5bd62458ff034f67fc53f159330fc854ecf1574f726 +RWSE3ohX2g5d/TU48XbCgbJSvaflEmrNg3j3rYX30vAdhVgU/gmle5Jf5smbNgnZNSEnzMcCBhd6D1kq1tXLJzOnxsttnNF0wg8= +SHA256 (Pkgfile) = 9a9378fa22f72e29b4483a0fb2f92faf6aedecb6a8aff0bf78cab533383347e7 SHA256 (.footprint) = ca5a9f3ef9c25bbb9276ddaf58e30935286f63deee679e7268d602e09f9934af -SHA256 (nspr-4.19.tar.gz) = 2ed95917fa2277910d1d1cf36030607dccc0ba522bba08e2af13c113dcd8f729 +SHA256 (nspr-4.20.tar.gz) = 2c8964913da89ffbaf464d49ce44d79e8804e1794ef9a8c52a7bff7224d1556e SHA256 (nspr.pc.in) = 57a655d034221760ce10278d2050bbe040b1db55be3db6e3a30f04a570877b71 diff --git a/nspr/Pkgfile b/nspr/Pkgfile index cbfd38530..0a54e5e20 100644 --- a/nspr/Pkgfile +++ b/nspr/Pkgfile @@ -3,7 +3,7 @@ # Maintainer: Fredrik Rinnestam, fredrik at rinnestam dot se name=nspr -version=4.19 +version=4.20 release=1 source=(https://ftp.mozilla.org/pub/nspr/releases/v$version/src/$name-$vers… $name.pc.in)

1 0

ports/opt (3.4): fontconfig: updated to 2.13.1
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit 1cc46b818b54be6700fb21035987299e930d8efc Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 30 20:26:18 2018 +0200 fontconfig: updated to 2.13.1 diff --git a/fontconfig/.footprint b/fontconfig/.footprint index 99cc966fd..5991c5386 100644 --- a/fontconfig/.footprint +++ b/fontconfig/.footprint @@ -74,9 +74,9 @@ drwxr-xr-x root/root usr/include/fontconfig/ -rw-r--r-- root/root usr/include/fontconfig/fontconfig.h drwxr-xr-x root/root usr/lib/ -rwxr-xr-x root/root usr/lib/libfontconfig.la -lrwxrwxrwx root/root usr/lib/libfontconfig.so -> libfontconfig.so.1.11.1 -lrwxrwxrwx root/root usr/lib/libfontconfig.so.1 -> libfontconfig.so.1.11.1 --rwxr-xr-x root/root usr/lib/libfontconfig.so.1.11.1 +lrwxrwxrwx root/root usr/lib/libfontconfig.so -> libfontconfig.so.1.12.0 +lrwxrwxrwx root/root usr/lib/libfontconfig.so.1 -> libfontconfig.so.1.12.0 +-rwxr-xr-x root/root usr/lib/libfontconfig.so.1.12.0 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/fontconfig.pc drwxr-xr-x root/root usr/share/ @@ -167,6 +167,7 @@ drwxr-xr-x root/root usr/share/man/man3/ -rw-r--r-- root/root usr/share/man/man3/FcDefaultSubstitute.3.gz -rw-r--r-- root/root usr/share/man/man3/FcDirCacheClean.3.gz -rw-r--r-- root/root usr/share/man/man3/FcDirCacheCreateUUID.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcDirCacheDeleteUUID.3.gz -rw-r--r-- root/root usr/share/man/man3/FcDirCacheLoad.3.gz -rw-r--r-- root/root usr/share/man/man3/FcDirCacheLoadFile.3.gz -rw-r--r-- root/root usr/share/man/man3/FcDirCacheRead.3.gz @@ -253,11 +254,20 @@ drwxr-xr-x root/root usr/share/man/man3/ -rw-r--r-- root/root usr/share/man/man3/FcPatternEqual.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternEqualSubset.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternFilter.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternFindIter.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternFormat.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternGet-Type.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternGet.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternGetWithBinding.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternHash.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterEqual.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterGetObject.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterGetValue.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterIsValid.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterNext.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterStart.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternIterValueCount.3.gz +-rw-r--r-- root/root usr/share/man/man3/FcPatternObjectCount.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternPrint.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternReference.3.gz -rw-r--r-- root/root usr/share/man/man3/FcPatternRemove.3.gz diff --git a/fontconfig/.signature b/fontconfig/.signature index c7feda927..f302a2b45 100644 --- a/fontconfig/.signature +++ b/fontconfig/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/bIENbOblvBkG8+v+2/ey0Ht+ONBS9RGcHbCp2puXIvN++d7FQMLvG4ab8j2MsG93HbGLgBAAS9k4GmIZ4tmkwY= -SHA256 (Pkgfile) = 2131ac0839fb89cf5f37d04769b42df94fdfd56e5a9a4bb47d932be398c1756f -SHA256 (.footprint) = 8dd9edf357934fb6be235ff097ea68a8bd21c22661082e3560fabd30d243f5da -SHA256 (fontconfig-2.13.0.tar.bz2) = 91dde8492155b7f34bb95079e79be92f1df353fcc682c19be90762fd3e12eeb9 +RWSE3ohX2g5d/Zd+ZeLPgind8kiUb4kbppYbvNPcp4rYlHeXjpkiZe4xxZO1uPHB7kHERcZhnYxu3uD3YpDQ2uEYFlKZ90HYmQk= +SHA256 (Pkgfile) = a0109cf72a1342adb2bcd9ca04bfef04649665609a91c574fd2dd5b75ad72811 +SHA256 (.footprint) = 113be23e03ee5b6f4b42797ed4b56aad5182af20af1d942a075c2b7aaf6c6b23 +SHA256 (fontconfig-2.13.1.tar.bz2) = f655dd2a986d7aa97e052261b36aa67b0a64989496361eca8d604e6414006741 diff --git a/fontconfig/Pkgfile b/fontconfig/Pkgfile index 382f17d66..742ba7412 100644 --- a/fontconfig/Pkgfile +++ b/fontconfig/Pkgfile @@ -4,7 +4,7 @@ # Depends on: freetype expat name=fontconfig -version=2.13.0 +version=2.13.1 release=1 source=(https://fontconfig.org/release/$name-$version.tar.bz2)

1 0

ports/opt (3.4): pango: footprint fix
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit ebfa2a2e8988dfa1080233537c9fc062f6cec537 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 30 19:10:27 2018 +0200 pango: footprint fix diff --git a/pango/.footprint b/pango/.footprint index 7f62fc1d3..046e8472b 100644 --- a/pango/.footprint +++ b/pango/.footprint @@ -49,21 +49,21 @@ drwxr-xr-x root/root usr/lib/girepository-1.0/ -rw-r--r-- root/root usr/lib/girepository-1.0/PangoFT2-1.0.typelib -rw-r--r-- root/root usr/lib/girepository-1.0/PangoXft-1.0.typelib -rwxr-xr-x root/root usr/lib/libpango-1.0.la -lrwxrwxrwx root/root usr/lib/libpango-1.0.so -> libpango-1.0.so.0.4200.3 -lrwxrwxrwx root/root usr/lib/libpango-1.0.so.0 -> libpango-1.0.so.0.4200.3 --rwxr-xr-x root/root usr/lib/libpango-1.0.so.0.4200.3 +lrwxrwxrwx root/root usr/lib/libpango-1.0.so -> libpango-1.0.so.0.4200.4 +lrwxrwxrwx root/root usr/lib/libpango-1.0.so.0 -> libpango-1.0.so.0.4200.4 +-rwxr-xr-x root/root usr/lib/libpango-1.0.so.0.4200.4 -rwxr-xr-x root/root usr/lib/libpangocairo-1.0.la -lrwxrwxrwx root/root usr/lib/libpangocairo-1.0.so -> libpangocairo-1.0.so.0.4200.3 -lrwxrwxrwx root/root usr/lib/libpangocairo-1.0.so.0 -> libpangocairo-1.0.so.0.4200.3 --rwxr-xr-x root/root usr/lib/libpangocairo-1.0.so.0.4200.3 +lrwxrwxrwx root/root usr/lib/libpangocairo-1.0.so -> libpangocairo-1.0.so.0.4200.4 +lrwxrwxrwx root/root usr/lib/libpangocairo-1.0.so.0 -> libpangocairo-1.0.so.0.4200.4 +-rwxr-xr-x root/root usr/lib/libpangocairo-1.0.so.0.4200.4 -rwxr-xr-x root/root usr/lib/libpangoft2-1.0.la -lrwxrwxrwx root/root usr/lib/libpangoft2-1.0.so -> libpangoft2-1.0.so.0.4200.3 -lrwxrwxrwx root/root usr/lib/libpangoft2-1.0.so.0 -> libpangoft2-1.0.so.0.4200.3 --rwxr-xr-x root/root usr/lib/libpangoft2-1.0.so.0.4200.3 +lrwxrwxrwx root/root usr/lib/libpangoft2-1.0.so -> libpangoft2-1.0.so.0.4200.4 +lrwxrwxrwx root/root usr/lib/libpangoft2-1.0.so.0 -> libpangoft2-1.0.so.0.4200.4 +-rwxr-xr-x root/root usr/lib/libpangoft2-1.0.so.0.4200.4 -rwxr-xr-x root/root usr/lib/libpangoxft-1.0.la -lrwxrwxrwx root/root usr/lib/libpangoxft-1.0.so -> libpangoxft-1.0.so.0.4200.3 -lrwxrwxrwx root/root usr/lib/libpangoxft-1.0.so.0 -> libpangoxft-1.0.so.0.4200.3 --rwxr-xr-x root/root usr/lib/libpangoxft-1.0.so.0.4200.3 +lrwxrwxrwx root/root usr/lib/libpangoxft-1.0.so -> libpangoxft-1.0.so.0.4200.4 +lrwxrwxrwx root/root usr/lib/libpangoxft-1.0.so.0 -> libpangoxft-1.0.so.0.4200.4 +-rwxr-xr-x root/root usr/lib/libpangoxft-1.0.so.0.4200.4 drwxr-xr-x root/root usr/lib/pkgconfig/ -rw-r--r-- root/root usr/lib/pkgconfig/pango.pc -rw-r--r-- root/root usr/lib/pkgconfig/pangocairo.pc diff --git a/pango/.signature b/pango/.signature index cebc697cb..728c7d1d9 100644 --- a/pango/.signature +++ b/pango/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/TFxRR9eg+giQkpZqR6VsCLRd+frozaZ4ChSqLfaYbrCqB7QXAU/NKf5Or17UTIx8u5v/V8o7+4D+X2jrxTaaAw= +RWSE3ohX2g5d/dLgN+Na1x/scXy+InhJE/2zdwuqXdHuCIGDXqxkYr7IGWV2/Q3+7Vk8xqy6AfxKeY4jLKj/EN7slroFwY+0/g8= SHA256 (Pkgfile) = d20f9efd233d971ddf3117bc3cf0666ae4c2cfb62b238a3cb26a25632bab478d -SHA256 (.footprint) = e8936d9538a9e07aeea641734cb3c984e12ec97962522de43fcdf6177827550f +SHA256 (.footprint) = 05cdafbf0d0768adca6a96ef77b2039b3099ff152c64b592802a3b714bb7e111 SHA256 (pango-1.42.4.tar.xz) = 1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d SHA256 (pango.modules) = 9cd325e4728900161c3066c1d8f329f8f9e35589acc3e34e378aedd86acbe2a4

1 0

ports/opt (3.4): [notify] pango: updated to 1.42.4. Fix for CVE-2018-15120.
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit d520e37a9e9e2a7a997f57131080e13bc1e138b8 Author: Fredrik Rinnestam <fredrik(a)crux.nu> Date: Thu Aug 30 17:31:21 2018 +0200 [notify] pango: updated to 1.42.4. Fix for CVE-2018-15120. diff --git a/pango/.signature b/pango/.signature index deed19272..cebc697cb 100644 --- a/pango/.signature +++ b/pango/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/fkwm4bQIIFLAZnU6CpyVEGzqbTxIm+vKeNdgL74wXTuOBj2xA8gII0izcrg0DAJLja86DOV3SAnv007bsiRaAQ= -SHA256 (Pkgfile) = 22188e7555ad92d71201be624f6990085191aa6a1b52b9d7992932bee68307de +RWSE3ohX2g5d/TFxRR9eg+giQkpZqR6VsCLRd+frozaZ4ChSqLfaYbrCqB7QXAU/NKf5Or17UTIx8u5v/V8o7+4D+X2jrxTaaAw= +SHA256 (Pkgfile) = d20f9efd233d971ddf3117bc3cf0666ae4c2cfb62b238a3cb26a25632bab478d SHA256 (.footprint) = e8936d9538a9e07aeea641734cb3c984e12ec97962522de43fcdf6177827550f -SHA256 (pango-1.42.3.tar.xz) = fb3d875305d5143f02cde5c72fec3903e60dc35844759dc14b2df4955b5dde3a +SHA256 (pango-1.42.4.tar.xz) = 1d2b74cd63e8bd41961f2f8d952355aa0f9be6002b52c8aa7699d9f5da597c9d SHA256 (pango.modules) = 9cd325e4728900161c3066c1d8f329f8f9e35589acc3e34e378aedd86acbe2a4 diff --git a/pango/Pkgfile b/pango/Pkgfile index e80514202..8e1eed9c0 100644 --- a/pango/Pkgfile +++ b/pango/Pkgfile @@ -4,7 +4,7 @@ # Depends on: xorg-libsm, xorg-libxft, gobject-introspection fribidi name=pango -version=1.42.3 +version=1.42.4 release=1 source=(http://download.gnome.org/sources/$name/${version:0:4}/$name-$versi… \ pango.modules)

1 0

ports/opt (3.4): sshfs-fuse: update to 3.5.0
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit 1dc68467c0e022793257f8e38f086cddf1060aba Author: Juergen Daubert <jue(a)jue.li> Date: Thu Aug 30 11:51:04 2018 +0200 sshfs-fuse: update to 3.5.0 diff --git a/sshfs-fuse/.signature b/sshfs-fuse/.signature index 0299cfa2a..f29996022 100644 --- a/sshfs-fuse/.signature +++ b/sshfs-fuse/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/UcTCkyMj97xE+fnY8vk71kY3OEkloaFvkF3LwMAbtN2XbMV9qouBcCzKEKYGEBAjuJja2aAaITeXx3fKVFLhw4= -SHA256 (Pkgfile) = ab39b3fe1120edb1f9b6f9b41e490d5c9e9e36ef6fbd7c8f6b8be84aad47522c +RWSE3ohX2g5d/V2AiCb6ZUTfziKTPKUuG8qH0leQeb0ek1w/6poP3mq9tWFByydIZOoqIRbYcEddqgAKsvWs926JlrkTNd0pZAI= +SHA256 (Pkgfile) = 963dcd29b619a15c41255ab13561be07bcf08680b3717240de5bf76c455c7cd6 SHA256 (.footprint) = 55809a24ab7e2ee0ae7278618a24a3532806af781f07c1f9c651d089933d2527 -SHA256 (sshfs-3.4.0.tar.xz) = d27ccd35436d72755c40234cefa081e30fa529e092232a5b4abbff2178c2c22f +SHA256 (sshfs-3.5.0.tar.xz) = c2035332489dea3be88b9328d0e1905f904a34f93eb87fb07cd5380329a3dfe5 SHA256 (sshfs.1) = 42c34c125251a6e94336f2bc11eee3575cfd63cf20b2b69919c198b4ed33f2ce diff --git a/sshfs-fuse/Pkgfile b/sshfs-fuse/Pkgfile index c593a1d20..b5376a406 100644 --- a/sshfs-fuse/Pkgfile +++ b/sshfs-fuse/Pkgfile @@ -5,7 +5,7 @@ # Depends on: fuse3 glib name=sshfs-fuse -version=3.4.0 +version=3.5.0 release=1 source=(https://github.com/libfuse/sshfs/releases/download/sshfs-$version/s… sshfs.1) @@ -13,9 +13,8 @@ source=(https://github.com/libfuse/sshfs/releases/download/sshfs-$version/s… build() { cd sshfs-$version - mkdir build ; cd build - meson .. --prefix /usr - DESTDIR=$PKG ninja -j ${JOBS:-1} install + meson build --prefix /usr + DESTDIR=$PKG ninja -C build -j ${JOBS:-1} install install -D -m 0644 $SRC/sshfs.1 $PKG/usr/share/man/man1/sshfs.1 }

1 0

ports/opt (3.4): libtirpc: update to 1.1.4
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit 53fd827ce6698876cf9677dd2e64314820083d98 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Aug 30 11:50:39 2018 +0200 libtirpc: update to 1.1.4 diff --git a/libtirpc/.footprint b/libtirpc/.footprint index fd22452d4..c7ddc08d5 100644 --- a/libtirpc/.footprint +++ b/libtirpc/.footprint @@ -1,4 +1,5 @@ drwxr-xr-x root/root etc/ +-rw-r--r-- root/root etc/bindresvport.blacklist -rw-r--r-- root/root etc/netconfig drwxr-xr-x root/root usr/ drwxr-xr-x root/root usr/include/ diff --git a/libtirpc/.signature b/libtirpc/.signature index 085e01754..153a6c9eb 100644 --- a/libtirpc/.signature +++ b/libtirpc/.signature @@ -1,5 +1,5 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/ZVsLJ359A+gBpxjHgsNmW2vLB9pyE/DSdELw0IymvH9Ot76lSJG5KxJgLVZGuuiJs7FEUq+L/FyqUo0tmA3SQs= -SHA256 (Pkgfile) = 272c55f3f5b7604d2840556c83167c4903d90431758055ef1e669b434a61c4e7 -SHA256 (.footprint) = 2ae344410fdeb52529ac2bafc9a7863ec21963fac1fb31265af81e502dbda2fc -SHA256 (libtirpc-1.0.3.tar.bz2) = 86c3a78fc1bddefa96111dd233124c703b22a78884203c55c3e06b3be6a0fd5e +RWSE3ohX2g5d/Tz+R0HNwmv35A/RfxNXN/oAyEWmqf7S1t0xT8h5Q/CLwDzMKvL77WXAm/kDItQELjaGUSYYagxnk/lPhb28CQ0= +SHA256 (Pkgfile) = 14c3d611935ee8b212e78fa46e8cfe3c275aa3a0c484bd827d5c54697cb96612 +SHA256 (.footprint) = dfffa90037e87e2954aec95c896e466e6be48fc6a8e9bc80b72d6aab0b64bdd7 +SHA256 (libtirpc-1.1.4.tar.bz2) = 2ca529f02292e10c158562295a1ffd95d2ce8af97820e3534fe1b0e3aec7561d diff --git a/libtirpc/Pkgfile b/libtirpc/Pkgfile index a88ec359d..8fd69a512 100644 --- a/libtirpc/Pkgfile +++ b/libtirpc/Pkgfile @@ -3,7 +3,7 @@ # URL: http://nfsv4.bullopensource.org/doc/tirpc_rpcbind.php name=libtirpc -version=1.0.3 +version=1.1.4 release=1 source=(http://downloads.sourceforge.net/project/$name/$name/$version/$name…

1 0

ports/opt (3.4): cups-filters: update to 1.21.1
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit 9e4934f73e90e36b71c78ca3264300c1d5c45e56 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Aug 30 11:50:05 2018 +0200 cups-filters: update to 1.21.1 diff --git a/cups-filters/.signature b/cups-filters/.signature index a40d89aeb..4c85c3f65 100644 --- a/cups-filters/.signature +++ b/cups-filters/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/ZTHecNkgqOtjU0iQK5QYY/dkrP1wTWI4HZpcaPp7FwBIntpSF+tTA3PZ3YOcB+eF25Z6K96rh1ZKlydLko/2QI= -SHA256 (Pkgfile) = 8f7195f7c99f040cad84532d6594a8681bf4754eee456c73a0fd7d6b3b589168 +RWSE3ohX2g5d/ddyltO0KKhtxGb4wKR5AeoTuASixnf8oGZY1CynN2IwndnuuEgnWJd/UDie0JOPd3UgVL+rkzFLuL0+9lNOsgU= +SHA256 (Pkgfile) = 5011009ade7a611c488f581e518078e2a6492522faefed091e9d1fc06af94505 SHA256 (.footprint) = 32c7827b0a711a571ef4e2b7eb7812ed42a3b8f8e590cdbe949fa60a5b3978d5 -SHA256 (cups-filters-1.21.0.tar.xz) = d1e975eaece2884ffa726f8d57dc249bd220e09cc5bd48ef7a0892987a07493b +SHA256 (cups-filters-1.21.1.tar.xz) = a02e88ed70cae3429591202d43d6100fec3f2c21fd0b9b40a122e11ab6449f7f SHA256 (cups-browsed) = 4c4900ee88d488078da20a5cabc949921382fa69bc28bb2a7f89fa5ae01afb5b diff --git a/cups-filters/Pkgfile b/cups-filters/Pkgfile index ebbe82f4d..402548e5f 100644 --- a/cups-filters/Pkgfile +++ b/cups-filters/Pkgfile @@ -4,7 +4,7 @@ # Depends on: ghostscript poppler qpdf mupdf name=cups-filters -version=1.21.0 +version=1.21.1 release=1 source=(https://www.openprinting.org/download/$name/$name-$version.tar.xz cups-browsed)

1 0

ports/opt (3.4): [notify] dropbear: fix for CVE-2018-15599
by crux＠crux.nu 30 Aug '18

30 Aug '18

commit af91638817af6b95420213dbacedd80e9b7c9659 Author: Juergen Daubert <jue(a)jue.li> Date: Thu Aug 30 11:13:01 2018 +0200 [notify] dropbear: fix for CVE-2018-15599 diff --git a/dropbear/.signature b/dropbear/.signature index 256a4e715..704c6c267 100644 --- a/dropbear/.signature +++ b/dropbear/.signature @@ -1,6 +1,7 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/aM/VCJQcchPZByyjLXWkIpUr9BU9OPBVGaP40mqd6c7pefQUHp4QSyQeoiFKqIwvmqQwPK21r30Ans7MktfLAE= -SHA256 (Pkgfile) = e59a8afd742c5470beefb72d51d9251fd520f77a0a3f4bd9711294d9c3337410 +RWSE3ohX2g5d/fYoSjOlXrVgdVZjSJWCm9ISaxGKVH365kFEj0OWUVRz5fTnuy3CfkroLhr8DzWaVMFqavELeCW0PE2EXJhHpwc= +SHA256 (Pkgfile) = 6e5947b4c0a75449ab2677121757588e436f4420278b90f2427ddf43f2a338f2 SHA256 (.footprint) = 62bfe7191a20fcd5f6ec3511c951dee47aefdae734f7d616302e6bfc3a0c1923 SHA256 (dropbear-2018.76.tar.bz2) = f2fb9167eca8cf93456a5fc1d4faf709902a3ab70dd44e352f3acbc3ffdaea65 SHA256 (dropbear) = def8d4ebda5759a3bc55055957235fa47f7e40216badf07830f487f05e7fbd42 +SHA256 (CVE-2018-15599.diff) = 42b5720cf6c888638cfb84fdd862fc0d323b2e023cbe5f9ccdaa2e0c35b6873e diff --git a/dropbear/Pkgfile b/dropbear/Pkgfile index 664dd2975..2315df8f0 100644 --- a/dropbear/Pkgfile +++ b/dropbear/Pkgfile @@ -5,13 +5,15 @@ name=dropbear version=2018.76 -release=1 +release=2 source=(http://matt.ucc.asn.au/$name/releases/$name-$version.tar.bz2 \ - $name) + $name CVE-2018-15599.diff) build () { cd $name-$version + patch -p1 -i $SRC/CVE-2018-15599.diff + echo '#define SFTPSERVER_PATH "/usr/lib/ssh/sftp-server"' > localoptions.h ./configure --prefix=/usr

1 0